server: Reverse return value and status in token_access_check to be consistent.